Privacy Policy

Plan2Skill (“we”, “us”, “our”) is an AI-powered educational platform that generates personalized learning roadmaps, quests, and exercises. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR) and related privacy laws.

By using Plan2Skill, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the service.

We collect the following categories of personal data:

• Profile data: name, email address, display name, avatar preferences, chosen archetype, language and locale settings.
• Learning data: goals, self-reported skill level, roadmap structure, quest progress, exercise responses, XP and streak counts, equipment inventory, and other gamification state.
• LLM interaction logs: prompts you submit, AI-generated content returned to you, token usage, model routing decisions, and latency metrics (used to improve quality and control costs).
• Device and technical data: IP address, browser type, operating system, device identifiers, and diagnostic logs.
• Analytics data: page views, feature usage, click events, session duration (only with your consent).

We use your personal data for the following purposes:

• Personalization: building learning roadmaps and quests tailored to your goals, skill level, and progress.
• AI content generation: sending prompts and context to third-party large language model (LLM) providers to generate educational content, exercises, and feedback.
• Service operation: authenticating you, tracking progress, delivering notifications, and maintaining the gamification experience.
• Service improvement: analyzing anonymized usage patterns to improve content quality, fix bugs, and develop new features.
• Legal compliance: complying with applicable laws and responding to lawful requests from authorities.

Plan2Skill relies on artificial intelligence to generate most of its educational content, including quests, exercises, explanations, and feedback. In line with Article 52 of the EU AI Act, we want you to know:

• Educational content (quests, exercises, feedback) is generated using artificial intelligence. AI-generated content is reviewed for quality but may contain errors.
• AI is used for: content generation, learning path personalization, and exercise feedback.
• No decision with legal or similarly significant effects on you is made solely by automated means.
• You should verify any critical information independently before relying on it.

To deliver the service, we share limited data with the following trusted processors. Each processor is bound by a data processing agreement and processes data only on our documented instructions.

• Anthropic (Claude): content generation.
• OpenAI (GPT): content generation.
• Google AI (Gemini): content generation.
• Mistral: content generation.
• Brevo: transactional and notification email delivery.
• PostHog: product analytics (only with your consent).

Some of these providers may process data outside the European Economic Area (EEA). When this happens, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards approved by the European Commission.

If you are located in the European Union, the United Kingdom, or another jurisdiction with comparable privacy laws, you have the following rights with respect to your personal data:

• Right of access: obtain a copy of the personal data we hold about you.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”): request deletion of your data when it is no longer necessary.
• Right to data portability: receive your data in a structured, machine-readable format and transmit it to another controller.
• Right to object: object to processing based on legitimate interests, including profiling.
• Right to withdraw consent: withdraw any consent you have given, at any time, without affecting the lawfulness of prior processing.
• Right to lodge a complaint: lodge a complaint with a supervisory authority in your country.

To exercise any of these rights, contact us at the address in Section 10. We will respond within one month as required by GDPR.

• Active accounts: we retain your data for as long as your account is active, so that we can continue to provide the service.
• Deleted accounts: when you delete your account, we remove or anonymize your personal data within 30 days, except where we are legally required to retain specific records (for example, billing records or fraud prevention).
• Backups: data in encrypted backups is purged according to our standard backup rotation schedule.

We use two categories of cookies and similar local storage:

• Essential cookies: required for authentication, session management, and basic functionality. These cannot be disabled.
• Analytics cookies: used only with your explicit consent, to understand how the product is used and improve it.

You can manage or withdraw consent for analytics cookies at any time through the cookie banner or your account settings.

Plan2Skill is intended for users aged 13 and older. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will take steps to delete it.

If you have any questions about this Privacy Policy, or wish to exercise any of your rights, please contact us at:

Email: privacy@plan2skill.com

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will update the “Last updated” date at the top of this page. Material changes will be communicated through the product or by email.